feat: allow rules-engine service to read its token (#4823)

* feat: allow rules-engine service to read its token Signed-off-by: dovholuknf <[email protected]> * fix: added env vars EDGEX_EKUIPER_USER_ID and EDGEX_EKUIPER_GROUP_ID to allow changing kuiper user id per PR feedback Signed-off-by: dovholuknf <[email protected]> * fix: convert casing to all upper Signed-off-by: dovholuknf <[email protected]> --------- Signed-off-by: dovholuknf <[email protected]>
edgexfoundry · Jul 12, 2024 · 5162257 · 5162257
1 parent 5fec775
commit 5162257
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cmd/security-secretstore-setup/entrypoint.sh b/cmd/security-secretstore-setup/entrypoint.sh
@@ -44,6 +44,12 @@ fi
 echo "$(date) Changing ownership of ${EDGEX_SECRETS_ROOT} to ${EDGEX_USER}:${EDGEX_GROUP}"
 chown -Rh ${EDGEX_USER}:${EDGEX_GROUP} "${EDGEX_SECRETS_ROOT}"
 
+EKUIPER_UID="${EDGEX_EKUIPER_USER_ID:-1001}"
+EKUIPER_GID="${EDGEX_EKUIPER_GROUP_ID:-1001}"
+
+echo "$(date) Changing ownership of ${EDGEX_SECRETS_ROOT}/rules-engine to ${EKUIPER_UID}:${EKUIPER_GID} to accommodate ekuiper."
+chown -Rh ${EKUIPER_UID}:${EKUIPER_GID} "${EDGEX_SECRETS_ROOT}/rules-engine"
+
 # Signal tokens ready port for other services waiting on
 exec su-exec ${EDGEX_USER} /edgex-init/security-bootstrapper --configDir=/edgex-init/res listenTcp \
   --port="${STAGEGATE_SECRETSTORESETUP_TOKENS_READYPORT}" --host="${STAGEGATE_SECRETSTORESETUP_HOST}"